Terms & Policy

This Policy explains what Aegis Nova Inc. ("Aegis Nova", "we", "us") collects when you use Envoy, why, who we share it with, and what rights you have.

Envoy is available in the United States and Canada only.

Two things worth knowing up front:

Envoy does not record calls. No audio is captured, stored or retained by us. What we keep is a written account of what happened — what Envoy did, what was said in substance, and any reference obtained.

Envoy contacts people who are not our users. If you have received a call or email from Envoy on someone's behalf, Section 9 is written for you.

1. Information You Give Us

Account. Your email address. Envoy uses one-time codes rather than passwords, so we hold no password for you.

Names. The names you tell us Envoy may use when speaking for you — an everyday name, a legal name, a business name.

Mission content. What you ask Envoy to do: your draft, the approach you choose, answers you give to its questions, facts you provide, limits you set, and anything you tell it not to mention.

Recipients. The name, telephone number or email address of the person or company you want contacted.

Vault. Information you choose to store for reuse — account numbers, policy references, addresses, security words, contacts, and files you upload.

Preferences. Standing instructions about how you want Envoy to behave.

Payment details. Handled entirely by our payment processor. We never receive or store your full card number, CVV or expiry date. We hold a token, the last four digits, the card brand, and your billing postcode.

2. Information We Generate

Mission records. A record of each mission: its reference, what was asked, the brief you approved, when it was dispatched, and what happened.

Call metadata. For each call: the numbers involved, when it started and ended, how long it lasted, and how it concluded. Not the audio.

Mission reports. A written account of what Envoy did, what the other party said in substance, and any reference number, callback window or next step.

Email content. Messages Envoy sends on your behalf, and replies received at your Envoy addresses.

Opt-out records. Where someone asks not to be contacted, we record that request in a form sufficient to enforce it, and permanently.

Usage and diagnostics. Log data, error reports, and technical information about how the service performed.

3. What We Do Not Collect

No call recordings. Envoy does not record calls. Audio passes through the service in order to conduct the conversation and is not retained by us.

No credentials. The Vault refuses passwords and login credentials, full payment card numbers, full Social Security or Social Insurance numbers, government identification numbers, bank account and routing numbers, and one-time codes. If you attempt to store one, it is declined before it is saved.

Used once, not stored. Some information a company demands to verify you — a partial Social Security number, a date of birth — is used for a single mission and discarded when that mission ends.

4. Why We Use It

We use your information to:

• operate the service — compose missions, place calls, send email, report results;
• charge you and process payments and refunds;
• enforce the protections in our Terms, including opt-out requests, calling hours and prohibited uses;
• improve the service, including diagnosing failures and measuring quality;
• communicate with you — sign-in codes, receipts, mission results, service notices;
• comply with law and respond to lawful requests; and
• protect against fraud, abuse and misuse of the service.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

5. Artificial Intelligence Processing

Envoy uses AI models to understand your instructions, prepare a brief, conduct calls, and draft email.

What is sent to model providers: your mission content and the context needed to carry it out. During a call, audio is streamed to the model provider in order to conduct the conversation in real time.

What is not: we strip identifiable sensitive patterns — card numbers, national identification numbers, routing numbers — before content reaches a model, and again before anything is written to our diagnostic systems.

Vault classification. When you save something to the Vault, its content is classified so it can be filed correctly. That classification request is never logged, because it would otherwise capture the value before anything knew what it was.

Training. We do not permit our model providers to train their general models on your content. This is governed by our agreements with them.

6. Who We Share It With

We share information only as necessary with service providers who help us operate Envoy, including:

• telecommunications providers, to place and receive calls
• artificial intelligence providers, to understand your instructions and conduct conversations
• payment processors, to take payment and issue refunds
• cloud infrastructure and database providers, to store your account and mission records
• email delivery providers, to send messages on your behalf and to you

Each is bound by contract to use your information only to provide those services to us, and not for their own purposes.

We may also disclose information:

• when required by law — a subpoena, court order or lawful government request;
• to protect rights and safety — ours, yours, or another person's;
• to professional advisers bound by confidentiality; and
• in a business transfer — a merger, acquisition or sale of assets, in which case this Policy continues to apply until replaced with notice to you.

7. How Long We Keep It

Account information — while your account exists.

Mission records and reports — while your account exists. These are the record of what was done for you.

Email text — kept indefinitely while your account exists.

Email attachments — kept for twenty-four (24) months from receipt, then removed. The message itself remains.

Call metadata — retained for service operation, diagnostics and dispute resolution.

Opt-out records — permanently, and they are never deleted. We cannot honour a request we have not kept, and this survives the deletion of the account that triggered it.

Payment and tax records — retained as long as required by law, typically seven years.

Consent records — retained as evidence that a disclosure was made and accepted.

8. Deleting Your Account

You may delete your account at any time from your settings.

What is deleted: your identity, mission content, Vault contents, contacts, preferences, email, and the association between you and your records.

What is not:

• opt-out records, which are permanent, because deleting them would allow someone to be contacted again after asking not to be;
• financial and tax records, retained as legally required, in minimised form;
• consent records, retained as evidence of what was disclosed and agreed.

Deletion is not reversible.

A note on payment records: our payment processor retains transaction records independently, under its own policy and legal obligations. We cannot delete those.

9. If Envoy Contacted You

This section is for people who are not Envoy users but have been contacted by it.

Why you were contacted. One of our users asked Envoy to contact you about a specific matter. Envoy acts on their instruction. It disclosed at the start of the call that it is an AI, and it will confirm this if you ask.

What we hold about you. Your name if it was provided, the number or address used to reach you, when contact was made and how long it lasted, and a written account of what was discussed. Not a recording — we do not make them.

How to stop being contacted. Tell Envoy on the call. It records the request and ends the call immediately. Depending on what you ask for, the request applies to that matter, to that user, or to Envoy entirely. Opt-out requests do not expire.

You may also write to abuse@envoy.pro at any time to report unwanted contact or ask to be added to our do-not-contact list.

Your rights. Depending on where you live, you may have the right to access, correct or delete information we hold about you. Write to privacy@envoy.pro. Note that we will not delete an opt-out record, because it exists to protect you.

If something went wrong. If Envoy behaved in a way it should not have — continued after you asked it to stop, called at an unreasonable hour, or misrepresented who it was calling for — please tell us at abuse@envoy.pro.

10. Your Rights — United States

Depending on your state, you may have the right to:

• know what personal information we collect, use and disclose;
• access a copy of it;
• correct inaccurate information;
• delete it, subject to the exceptions in Section 8;
• opt out of sale or sharing — we do neither; and
• not be discriminated against for exercising these rights.

To exercise any of them, write to privacy@envoy.pro. We will verify your identity before acting, and respond within the time your state's law requires.

We do not sell personal information and we do not share it for cross-context behavioural advertising.

Authorised agents may act on your behalf with written proof.

Appeals. If we decline a request, you may appeal by replying to our response. We will answer within the period required by your state's law.

11. Your Rights — Canada

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation including Quebec's Law 25.

You have the right to:

• access the personal information we hold about you;
• correct it where it is inaccurate;
• withdraw consent, subject to legal and contractual restrictions;
• be informed of the purposes for which it is used; and
• complain to us, and to the Office of the Privacy Commissioner of Canada or your provincial commissioner.

Quebec residents additionally have rights of de-indexation and portability, and the right to be informed when a decision is based exclusively on automated processing.

Cross-border transfer. Your information is stored and processed in the United States. United States law may permit access by government authorities in ways Canadian law does not. By using Envoy you consent to this transfer. Our providers are bound by contract to protect it.

Canada's Anti-Spam Legislation. Where Envoy sends email on your behalf to Canadian recipients, you are responsible for having the consent CASL requires. Envoy identifies its sender and provides a means of contact in every message.

Privacy Officer: privacy@envoy.pro

12. Security

We protect information with encryption in transit and at rest, encryption of stored Vault values, access controls limiting internal access to what is necessary, redaction of sensitive patterns before content reaches diagnostic systems, and passwordless authentication that removes the most commonly stolen credential.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as the law requires.

Report a vulnerability to security@envoy.pro.

13. Children

Envoy is not for anyone under 18. We do not knowingly collect information from children. If we learn we have, we delete it. Contact privacy@envoy.pro if you believe a child has provided us information.

14. How We Contact You

Envoy sends sign-in codes, receipts, mission results and service notices. Some messages are delivered by our service providers on our behalf.

If you receive a message claiming to be from Envoy that you did not expect, forward it to abuse@envoy.pro.

15. Changes

We may update this Policy. Material changes will be notified by email or in the service at least thirty (30) days before they take effect, except where a change is required immediately by law. The date at the top shows when it was last revised.

16. Contact

Aegis Nova Inc.

8 The Green #22081

Dover, DE, 19901, United States

Privacy and data requests: privacy@envoy.pro

Unwanted contact: abuse@envoy.pro

Security: security@envoy.pro

Legal: legal@envoy.pro

Canadian residents may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to their provincial commissioner.